Design/Logic Flaw

2007-10-1418:17:00

PRIOn knowledge base

www.prio-n.com

6.8 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

41.3%

JSON

CMS Made Simple 1.1.3.1 does not check the permissions assigned to users who attempt uploads, which allows remote authenticated users to upload unspecified files via unknown vectors.

CPENameOperatorVersion
cms_made_simpleeq1.1.3.1

CPE	Name	Operator	Version
	cms_made_simple	eq	1.1.3.1

References

securityreason.com/securityalert/3223

www.securityfocus.com/archive/1/481984/100/0/threaded